Re: Firefox Addon: KeyScrambler

[mrx <mrx () propergander org uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/12/2010 13:40, Julien Reveret wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi list,
> >
> > Is anyone familiar with the firefox addon KeyScrambler? According to
> > developers this encrypts keystrokes.
>
> What if the attacker uses a firefox plugin such as ffsnif[1] to get user's
> credential ?
> As Dan said, I guess this plugin will only fool some keyloggers, but not all.
>
> [1] http://azurit.elbiahosting.sk/ffsniff/

Thanks for the link.

Looking through the code of ffsniff was an eye opener.
I would hope that such an addon would be instantly recognised as malicious by Mozilla.
I am a curious hobbyist and pretty much a noob when compared to real professionals.
Perhaps in five years or so I might actually be able to contribute to the community :-)

Thanks for your response

regards
Dave
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBTQCvzbIvn8UFHWSmAQIibwgA4XwD9OmqEmogqG4oqrMPsGMML5Wnw7HC
H3kYfXbRVJWMoWHHAcKwP6qSmddCGBLl+In3sifoybyEJvh0ceu92o9GpDJVytbi
adOP5jnlJWu595Ff2tPY6tRuLOb4YVH7GkhPL5N3Lj340JR4rlTzYKuisqC6OPyk
1qzf05XtZZRDqdr9XrYzFdEcfbFQJ+/zGGhfWiSU38d2bYRjo56ujcfo4asb5ojb
QpgCUo9wP5OlSHz+A+pCcDKcFjPCeNV2i2Qqgx1DVFHlrEafdAQ2sFKoewxPW4oX
Tm1zrYeRsW1rmVrWgbEjJZOQRCLMsVqunhjQ4Jp2klU4eRX+fGCOzw==
=C9qt
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/